update docs

docs/thijooree/14-settings.md

@@ -0,0 +1,71 @@
+# Settings
+
+The settings hub and the logins management screen.
+
+---
+
+## Settings Hub — `SettingsFragment`
+
+A simple preference-list screen with navigation links to sub-sections:
+
+| Entry | Destination |
+|---|---|
+| Logins | `SettingsLoginsFragment` |
+| Security | `SettingsSecurityFragment` |
+| Appearance | `SettingsAppearanceFragment` |
+| Storage | `SettingsStorageFragment` |
+
+---
+
+## Logins — `SettingsLoginsFragment`
+
+Manages all connected bank accounts and profiles.
+
+### Account List
+
+Each connected login is shown as a card. Within each login card, individual profiles (CIF profiles for MIB, or the single account for BML/Fahipay) are listed.
+
+Each profile entry shows:
+- Profile name / CIF type
+- Account number(s)
+- Profile image (circular avatar)
+- Visibility toggle switch
+
+### Visibility Toggle
+
+Toggling a profile off hides it from the accounts list and excludes it from API refresh cycles. The session is kept alive — the profile can be re-enabled without re-logging in.
+
+### Profile Image
+
+A pencil icon (`ic_edit`) next to each profile opens an image chooser:
+- **Gallery** — pick from device photo library
+- **Camera** — capture via device camera (temp file: `cacheDir/profile_photo_tmp.jpg`)
+
+Profile images are stored locally via `ProfileImageStore`:
+- BML: key `bml_{profileId}`
+- Fahipay: key `fahipay_{loginId}`
+- MIB: uploaded to the MIB server via profile image API (P40); retrieved via hash (P41); deleted via P42
+
+### Add Account
+
+A **+** (Add) button navigates to `LoginActivity` → `BankSelectionFragment` to add a new bank login.
+
+### Logout
+
+A **Logout** button on each login card shows a confirmation dialog. On confirm:
+- Session tokens are revoked where supported
+- Credentials are removed from `CredentialStore`
+- All associated `MibAccount` objects are removed from `BasedBankApp`
+- The accounts list is refreshed
+
+### Business OTP Seed (MIB)
+
+For MIB corporate/business profiles, an **OTP Seed** entry allows importing a TOTP seed string. The seed is stored encrypted in `CredentialStore` and used by the [OTP Screen](12-otp-screen.md).
+
+---
+
+ 
+
+---
+
+[← Financing](13-financing.md)     **Next →** [Settings — Security](15-settings-security.md)